Materials for boards and compliance teams in organisations that use off-the-shelf AI tools. Which obligations already apply today, who has to perform them and what decides the role your organisation takes towards a given system.
Legal status: August 2026
See also: DPO and GDPR NIS2 and KSC Incidents and Breaches Training and workshops
A review of AI use cases and of your roleWhat you have to do depends on the role your organisation takes towards a given tool and on what it does with the output. Let us start with a list of the use cases already running — no obligation and no sales preamble. Explore the service
Article 50 of the AI Act splits the obligations by role towards the system, not by risk level. Two of the four are addressed directly to the organisation that only deploys AI — and the provider will not perform them for it.
